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ABSTRACT 

While services benefit from distributed cloud centers run¬ 
ning in isolation, allowing multiple centers to cooperate on 
implementing services unlocks the full power of distributed 
cloud computing. Distributed cloud services are typically 
set up by chaining together a number of functions that are 
specified with an implicit order. They can incorporate com¬ 
plex structures, e.g., include functions that classify and for¬ 
ward flows over distinct branches and functions that are tra¬ 
versed by certain types of flows but skipped by others. These 
requirements need specification techniques more powerful 
than existing graph-based ones. We present a context-free 
grammar for abstract description of service function chain¬ 
ing structures and a concrete syntax based on the YANG 
data modeling language that can easily be translated into 
an explicit configuration of service functions. Finally, we 
present examples of using our models for complex services 
within common use cases of service function chaining. 

1. INTRODUCTION 

According to a cloud-readiness study published in the lat¬ 
est Cisco Global Cloud Index [3j, in the coming years, cloud 
computing operators are expected to be prepared for a wide 
range of cloud services including video and music streaming 
in different qualities, communication via text/voice/video, 
medical and safety applications, stock trading, and personal 
content storage. Some of these services have very strict re¬ 
quirements that should be considered in all stages of ser¬ 
vice design, implementation, deployment, and maintenance. 
Distributed cloud computing divides the burden of fulfill¬ 
ing these requirements over multiple cloud centers. Net¬ 
work Function Virtualization (NFV), in turn, aims at de¬ 
signing efficient architectures and solutions and reducing the 
complexity of service provisioning in cooperating distributed 
cloud centers |4j. 

By applying NFV in large-scale networks, a service can be 
defined as a composition of multiple service functions that 
should be traversed by network flows in a specific order [H]. 
The simplest case for such a service is a linear chain of at 
least one service function between two specific endpoints 
in the network. Inserting functions that can split network 
flows over different paths makes the structure of a service 
more complicated than a simple chain. Such services can be 
modeled as directed graphs consisting of service functions as 
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nodes and the connections between pairs of service functions 
as edges of the graph. These graphs are known as forwarding 
graphs in ETSI NFV terminology [5]. 

For resource allocation and network optimization purposes, 
network operators need precise and compact representations 
for the graphs that model the structure and requirements of 
a service. As long as the order of traversing the functions 
is fixed and given, traditional graph representations (e.g., 
adjacency lists and matrices) can be used for modeling the 
services. But these representations can quickly become inef¬ 
fective when the exact order of traversing the functions is not 
specified or not relevant for the functionality of the service. 
For example, when there are no direct dependencies between 
two functions that should be applied to a flow, the network 
can benefit from a flexible service representation that allows 
the operator to compose the required services in the most 
efficient way. We have addressed this problem by introduc¬ 
ing a context-free grammar in a previous work fl. In this 
paper, we present an enhanced version of our service de¬ 
scription grammar that can express more service structures 
compared to its earlier version. Based on this grammar, we 
propose an extension to the YANG [l data model for service 
function chaining, published as a working draft [l2] by the 
IETF Service Function Chaining (SFC) group. With this 
extension, complex and flexible service compositions can be 
defined, configured, and reused. 

This paper is organized as follows: after a brief overview 
of related work in Section [2] we describe our models in Sec¬ 
tion [3] To highlight the value of our proposed service specifi¬ 
cation models, we present examples of complex chains from 
common service function chaining use cases in Section [4] 
before we conclude the paper in Section [5] 


2. RELATED WORK 


Sun et al. 14 have published a survey of cloud computing 


description languages. Our model differs from the existing 
models in the sense that we focus on a flexible description for 
expressing how the components of a distributed cloud service 
are chained and composed to set up a service. In our pre¬ 
vious work [ll , we have elaborated on the importance and 
influences of the service structure on different metrics con¬ 
cerning the network operators, service providers, and users. 
In this paper, we extend our previous description model with 
more features making it capable of describing more complex 
structural requirements. In a similar approach to flexibility 
in service description, Keller et al. 7 propose modeling a 
cloud application as a generic graph template that can be 
modified and adapted during and after deployment. 



The YANG 1 data modeling language is designed to pro¬ 
vide a hierarchical model of configuration and runtime data 
for the Network Configuration Protocol (NETCONF). It is 
used in various network management scenarios and supports 
data instances in different formats, e.g., XML. Moreover, ap¬ 
plication of YANG/NETCONF in software-defined network¬ 
ing, e.g., within the OpenDaylight 10 architecture, makes 
it a good candidate for being adopted in network function 
virtualization management and orchestration. For exam¬ 
ple, Scholler et al. 13 have defined a YANG-inspired model 
for expressing the resilience and scalability requirements of 
Virtual Network Functions (VNFs). The IETF SFC work¬ 
ing group is also developing a YANG model that currently 
can express SFC scenarios with a linear structure. Based on 
the latest draft [12] of the IETF SFC YANG model, we have 
defined our model to also include the description of complex 
service function chaining structures. 


(start) 

(comp) 

(bestbind) 

(allbinds) 

(spit) 

(branch) 

(functions) 

(func) 

(num) 

(nonzero) 

(digit) 

(vnf) 

(endpoint) 


= service {(comp)(,(comp)) } 

= (functions) | (bestbind) | (allbinds) | (spit) | (func) 
= best-binding {(functions)} 

= all-bindings {(functions)} 

= split {(func)(,(bestbind))?(;(branch)) + } 

= (comp)(,(comp)) (.(num))? | pass 
= (func) (, (functions))* 

= (vnf) | (endpoint) 

= (nonzero) (digit) 

= 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8|9 
= 0 | (nonzero) 

= /l I fl I ■ ■ ■ I /|F| 

= Pi I P2 | ' ' ' | P|.P| 

Figure 1: Context-free grammar 


3. FLEXIBLE SERVICE SPECIFICATION 


The initial version of our context-free grammar 11 can 


specify a flexible description for the way service functions 
are chained together to build a service. In this section, we 
present an enhanced and more powerful version of this gram¬ 
mar and a YANG data model based on the new grammar. 
The grammar and the data model both describe a service 
as an arrangement of different compositions of service func¬ 
tions. For simplicity, we assume all the functions that build 
up a service are virtualized, and we use VNFs and service 
functions interchangeably in this paper. A composition in 
the simplest case is a single VNF or an endpoint of a service 
flow but it can also be complex like a multi-branch structure. 


3.1 Context-Free Grammar 

We express our context-free grammar in Extended Backus- 
Naur Form (EBNF) as shown in Figure [I] Terminals of the 
grammar are given in bold font, (vnf) and (endpoint) cor¬ 
respond to the set of available VNFs and the set of points 
in the network where the service flows start or end. 

This grammar can be used for specifying a set of totally 
ordered VNFs to be chained together in the given order 
(simple sequence) and a set of partially ordered VNFs to 
be chained together in the most efficient order according to 
the optimization objectives in the network (best-binding). 
Extending our previous grammar, a set of VNFs can now 
be specified to be chained together in a way that all pos¬ 
sible permutations of them are traversable (all-bindings), 
i.e., a full mesh of paths has to be built among the VNFs. 
A complex branching structure for splitting the flows over 
different branches (split) can also be expressed. This com¬ 
position consists of: 


• a VNF that can classify and split the flows over differ¬ 
ent branches, specified as the first (func) in the split 
composition, 

• an optional best-binding composition to be traversed 
before the flows reach the branches [ll , 

• branches that can consist of a single VNF or endpoint, 
a composition of multiple VNFs, or can be an empty 
branch (pass) that can be used for skipping a part of 
the service structure. In case the branches are identi¬ 
cal, they need to be specified only once together with 
the number of required replications. 


Existence of partially ordered sets of VNFs in a service 


module: flexible-service-specification 
+—rw specification 

+—rw starting-component component-ref 

+—rw service-component* [component-identifier] 

+—rw component-identifier string 

+—rw compositions* [composition-identifier] 

+—rw composition-identifier string 

+—rw (composition-type)? 

+—:(sequence) 

I +—rw sequence-functions* service-function 

+—:(best-binding) 

I +—rw best-binding-functions* service-function 

+—:(all-bindings) 

I +—rw all-bindings-functions* service-function 

+—:(split) 


+—rw splitter-function 
+—rw optional-best-binding* 

+—rw outgoing-branches* [branch-id] 
+—rw branch-id uint8 

+—rw (branch-type)? 

+—:(normal-branch) 

I +—rw composition 
I +—rw replications? 

+—:(pass) 

+—rw string 
+—:(function) 

I +—rw single-function 
+—:(link-to-composition) 

+—rw composition 


service-function 

service-function 


component-ref 

uint8 

string 

service-function 


component-ref 


Figure 2: YANG data model 


structure turns the deployment request for the service into a 
flexible request that can be translated into the best possible 
forwarding graph depending on requirements of the service 
and available resources in the network. 

3.2 YANG Data Model 

Based on the context-free grammar shown in Figure[l] we 
dehne a YANG model for services. YANG data models can 
be used for defining configuration and runtime state of differ¬ 
ent data elements. Services and the network functions which 
composed them can be abstracted as reconfigurable data el¬ 
ements with certain attributes, e.g., required link capacity 
and computational resources. In a dynamic cloud computing 
environment, where requirements of services and availability 
of network resources are changing over time, the structure 
of a service can also be considered as a (re)configurable at- 
tribut e of the service. In the IETF SFC YANG data model 
draft 12 , no model has been specified for expressing com¬ 
plex service structures besides simple sequence of functions. 
To fill this gap, we propose extending the IETF SFC model 






with our definitions. We present the tree representation of 
our YANG module (effectively, the grammar) for flexible 
specification of complex services in Figure [2] and omit the 
detailed definition of the module because of space limita¬ 
tions. 

We have created the tree representation using pyanjQ 
an open-source tool for validating YANG modules. Within 
this tree, each leaf node that represents a data element is 
specified by a name and a type, e.g., identifier of type 
string. A list of leaf nodes is specified by <name>* and 
type of the leaves, e.g., the list sequence-functions de¬ 
fines a set of service-functions. Lists that consist of 
non-leaf nodes are specified by <name>* and a key writ¬ 
ten as [<name>] that is unique among all items of the list, 
e.g., in the list of compositions each item has a unique 
composition-identifier. Description of the list elements 
follows as children of the node. To express a choice among 
different options, the node name is written as (<name>)? 


^ CPM > BNG 


(a) Adapted from Ref. 2j 



(b) Adapted from Ref. 2j 



(c) Adapted from Ref. |6j 


with the format :(<name>). Optional data items are rep- 

woe 


EdgeFW 


MON 


ADC 


AppFW 

resented as <name>?, e.g., number of replications can be 

hl: 


UZ 


LI 


LI 


zr 


optionally specified for a branch if outgoing branches from 
a splitter function are identical. 

We use service-function for referring to the service func¬ 
tion type defined in the latest IETF draft of a YANG model 
for SFC 112]. This type corresponds to the VNFs and end¬ 
points in our grammar description. 

Consistent with the context-free grammar, the YANG mod¬ 
ule also contains all of the composition types described in 
Section |3.1| sequence, best-binding, all-bindings, split, 
and single function. 

In our flexible service specification module, the service 
specification consists of a list of service-components, which 
is a fist of at least one composition of service functions. Def¬ 
inition of components is required for defining complex ser¬ 
vices, e.g., nested compositions and branching structures. 
Such structures can only be expressed using path references 
within the module, as in the YANG data modeling lan¬ 
guage a recursive structures are not allowed. For this pur¬ 
pose, we define a reference to component-identifier as a 
new type called component-ref and use it for referring to 
defined components within other compositions. For refer¬ 
ring to the starting point of the service among all defined 
components, we use the starting-component reference. 

With this model, services can be defined from scratch us¬ 
ing the available types of functions in the network. Addi¬ 
tionally, the operator can keep a catalog of pre-composed 
services that a tenant can request as an standalone service 
or for using it as part of a more complex service structure. 
Existing services can easily be referenced within a service 
structure using the composition type link-to-composition. 

To keep the descriptions compact, we have only included 
structural attributes in the YANG model shown here. Dif¬ 
ferent requirements and specifications of services and their 
components can be included in the model, e.g., as described 
in the IETF SFC YANG data model draft 12l. 


(d) Adapted from Ref. |sj 

Figure 3: Example service function chaining cases 


service compositions (described in Section [ 3 ]). In this sec¬ 
tion, we give an overview of these compositions occurring in 
common cloud services. We show examples from use cases 
of service function chaining iHi! in fixed and mobile 
broadband networks and data center networks, where dis¬ 
tributed cloud services can be integrated. We show sample 
forwarding graphs and how the graphs can be compactly 
described using our grammar. Every abstract service de¬ 
scription expressed by the context-free grammar described 
in Section |3.1| can also be expressed using corresponding 
YANG definitions shown in Section f3. 21 

A simple example of service function chaining in fixed 
broadband networks consists of a Broadband Network Gate¬ 
way (BNG) and a Network Address Translator (NAT) as 
endpoints of service flows between the customer premises 
network and public Internet. Assuming that all network 
flows need to traverse these two functions, Figure [3a| shows 
the structure of this service. Using a simple sequence from 
our model, the abstract description of this service is: 
serviced BNG, NAT} 

Depending on the requirements of the service, this de¬ 
scription can be interpreted as a symmetric service, i.e., the 
functions are traversed by flows in both directions between 
the Internet and the customer network, or it can describe an 
asymmetric service to be applied only to flows going from 
the customer network towards the Internet. 

In case the order of traversing the functions does not affect 
the functionality of the service, describing the service using 
a “best-binding” composition instead of a simple sequence 
of functions allows the operator to order the functions in the 
most beneficial way for the network and the service, e.g.,: 


4. USAGE SCENARIOS 

For delivering a service, different VNFs need to be de¬ 
ployed in the network and corresponding flows need to be 
routed through them in a specific order, resulting in different 

1 https : //code.google.com/p/pyang/ 


service{best-binding{BNG, NAT}} 

Now we assume that HTTP traffic is detected and sent 
through an HTTP filter function and non-HTTP traffic is 
routed directly between BNG and NAT. The corresponding 
graph for this service is shown in Figure |3b| This service 
can be expressed as follows using our “split” composition 






















































type comprising a branch type “pass” to enable skipping 
the HTTP filter function for some flows: 

servicefsplit-fBNG; HTTP-Filter; pass}, NAT} 

The first function in the “split” composition (BNG) is 
the splitter function and the HTTP-Filter and the “pass” 
keyword each correspond to one outgoing branch. 

As a more complex example, we look at a scenario in a 
mobile broadband network in Figure[3c[ This is a symmetric 
service between the Internet and a Packet Gateway (PGW) 
where the user equipments are connected via the access net¬ 
work. Firewall (FW) and Deep Packet Inspector (DPI) are 
applied to all flows and later on the flows are divided over 
three branches. TCP flows need to traverse a TCP optimizer 
function, flows belonging to a certain video streaming service 
go through a Lawful Interception (LI) and a video optimizer 
function, and other flows need to go through a header enrich¬ 
ment function. This structure can be expressed as follows, 
using a “split” composition: 

service{ 

PGW, FW, 

split{DPI; Header-Enr; LI, Video-Opt; TCP-Opt} 

} 

As a last example, we look at a service chaining scenario 
in a data center network, shown in Figure [3d] Different flows 
need to traverse different subsets and different permutations 
of the set of functions, including a Web Optimization Con¬ 
troller (WOC), a firewall responsible for external threats 
(EdgeFW), a network and application monitoring function 
(MON), an Application Delivery Controller (ADC), and an 
application-specific firewall (AppFW). This complex struc¬ 
ture can be compactly described using an “all-bindings” 
composition: 

service} all-bindings{WOC, EdgeFW, MON, ADC, AppFW}} 

These examples confirm the existence of complex chaining 
structures in networks. Our models facilitate the flexible and 
compact description of possible chaining scenarios. 

5. CONCLUSION 

The grammar presented in this paper provides a power¬ 
ful tool for abstract specification of complex service struc¬ 
tures that can be used as a basis for defining specification 
languages and models. The YANG model we have defined 
based on this grammar extends the structural aspects of ex¬ 
isting YANG definitions for service function chaining that 
are under development by standardization bodies. These 
definitions and various use case documents prove the exis¬ 
tence of service structures that are more complicated than a 
linear and totally ordered set of functions, which makes our 
model an important contribution towards flexible specifica¬ 
tion of complex structures in distributed cloud services. 
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